
$ rpki-client -vvf rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/BFECDAAC803F11EC8394C23AC4F9AE02.roa
File: BFECDAAC803F11EC8394C23AC4F9AE02.roa (raw, json)
Hash identifier: pgBwoEEMrknf3aT4OROmoIE+79PWX2unMw4v1PNnUSk=
Subject key identifier: CA:F8:94:AC:AF:65:EE:84:CC:14:F6:17:90:0D:E2:9E:DD:4E:F3:08
Certificate issuer: /CN=A917647E/serialNumber=FDD2507822183CE80759419D56540606A2486B4B
Certificate serial: 08FB
Authority key identifier: FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/BFECDAAC803F11EC8394C23AC4F9AE02.roa
Signing time: Wed 06 May 2026 20:25:28 +0000
ROA not before: Wed 06 May 2026 20:25:28 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 132420
IP address blocks: 103.90.240.0/22 maxlen: 24
2400:ffc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl
rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2299 (0x8fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917647E, serialNumber=FDD2507822183CE80759419D56540606A2486B4B
Validity
Not Before: May 6 20:25:28 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69fba3b8-be03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:05:ad:d8:bd:f7:22:ba:7c:fb:2a:5a:d8:
e6:54:ee:a0:63:d5:21:fc:cf:d7:25:77:81:e7:ea:
2d:8a:04:8b:c6:a2:d6:97:ed:63:bb:7b:bf:21:46:
00:6b:b0:4c:81:6a:3e:72:97:09:e8:c6:92:f5:1e:
82:0b:dd:ba:39:e7:db:28:9c:24:8c:5b:b5:a2:44:
c4:0e:b5:c9:d2:77:f8:60:f1:7e:db:f9:7d:96:49:
a6:0f:29:d1:86:26:44:5d:92:6e:f6:b1:b3:ca:ae:
0c:0c:17:19:3e:0a:a8:d2:3d:81:f9:41:b5:10:77:
cb:7e:88:87:ac:28:0e:3b:08:4a:25:35:e1:dd:bf:
7e:30:66:16:9a:9d:48:40:9f:dc:95:86:48:21:c2:
dd:f4:dd:0d:62:f3:d3:3d:b9:b7:3b:57:0f:6d:94:
79:94:1f:9f:4c:9f:4f:60:03:ae:46:50:6c:ce:b5:
4d:5b:98:0b:86:76:c7:95:e6:d4:85:24:92:c5:08:
6a:a7:e9:d0:55:f4:7e:9c:3a:68:f8:d3:32:c1:d8:
ab:e1:08:9c:fc:dd:37:5a:84:5a:9d:87:c6:38:f2:
d9:f5:cf:cb:e1:92:13:e4:65:9c:33:a4:b5:0f:57:
14:2c:f8:74:44:dc:a7:a6:25:d8:8b:54:9e:23:bc:
2f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F8:94:AC:AF:65:EE:84:CC:14:F6:17:90:0D:E2:9E:DD:4E:F3:08
X509v3 Authority Key Identifier:
keyid:FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/BFECDAAC803F11EC8394C23AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.90.240.0/22
IPv6:
2400:ffc0::/48
Signature Algorithm: sha256WithRSAEncryption
13:b5:5d:e5:4d:b8:2d:41:0d:24:fe:11:5c:80:b9:1e:6c:1c:
e6:64:73:52:9f:29:b5:0d:6a:38:71:92:7f:d2:6d:bf:90:9b:
0d:14:fe:aa:d2:25:d0:33:66:50:76:32:6d:90:76:08:36:fb:
ca:60:99:8d:5c:f0:52:65:2e:56:7f:93:46:69:f0:b0:ad:12:
3b:5b:08:d3:e0:d3:3b:e0:ce:f8:bd:18:7b:f7:88:1d:1d:cb:
89:28:ab:d2:dc:28:02:ad:a9:eb:60:b8:42:f6:d3:6c:bd:d3:
94:a2:24:44:7a:12:cc:17:3f:a2:4d:84:fb:bc:86:c6:1e:fe:
11:40:45:97:a7:7a:1a:e4:db:65:5e:64:da:68:4d:03:90:71:
a5:1d:c7:4f:90:e0:66:ac:23:32:18:ed:d9:a7:82:31:6c:02:
0f:d3:a0:68:11:5c:00:e9:52:e9:dc:eb:4a:17:43:8f:55:d3:
8d:73:c9:a8:47:23:0d:f8:a9:02:f6:36:0f:e6:03:82:f9:84:
3e:9f:26:da:98:2c:b8:94:20:1a:83:a7:b5:b8:70:be:a4:10:
4f:1c:4d:f8:9f:7a:ad:8c:1c:a6:cb:0b:17:c1:77:6d:79:3e:
b2:4b:0d:94:89:fb:4b:1d:8c:1b:a9:ec:9a:18:f0:59:7c:bc:
79:35:b1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:45:05 2026 by rpki-client